Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: B26kE7OGANovJRe6Za0zpHhGMZ6m9ZkLS2NawIc8La8=
Subject key identifier: 04:55:F1:3C:AB:EF:1D:FA:D2:5D:8A:D5:BA:60:8D:8E:FA:DD:E4:24
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 01A0016F6997353454441958D30B12D788A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0849
Signing time: Fri 14 Aug 2026 18:01:13 +0000
Manifest this update: Fri 14 Aug 2026 18:01:13 +0000
Manifest next update: Sat 15 Aug 2026 18:01:13 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: WARH10mX5iIij3sQUg7MtRLG0+iRtRkyczcOuVz3BoY=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:69:97:35:34:54:44:19:58:d3:0b:12:d7:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Aug 14 18:01:13 2026 GMT
Not After : Aug 15 18:01:13 2026 GMT
Subject: CN=0455f13cabef1dfad25d8ad5ba608d8efadde424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:a8:aa:f6:e8:2c:36:1c:27:fa:88:04:2a:
d9:64:35:2f:b3:c5:1a:92:87:5e:0b:37:d6:59:25:
5d:48:32:10:cb:fc:8f:a8:b1:73:9f:9e:68:d8:8b:
3a:a9:66:32:a1:31:34:7b:b3:0c:21:9e:30:7b:5b:
b1:14:ba:43:4a:14:04:95:38:66:70:1b:6d:db:4d:
e3:d8:dd:98:86:e3:6e:4a:8a:4c:dc:ab:c3:61:c8:
cb:00:b2:07:55:fa:4a:ab:f3:28:55:fa:b8:17:8c:
76:34:30:9c:2a:45:73:1c:5a:1e:7e:d1:07:ae:a7:
e5:4b:61:70:fb:af:4e:28:30:95:d8:82:eb:e9:b3:
2c:1f:8c:80:b6:03:89:33:4d:c4:67:c1:4e:b8:e1:
79:7a:ab:06:ac:36:2a:bf:49:f5:65:07:c8:a8:12:
1f:89:ff:df:cb:1d:3d:e4:b8:e3:63:52:0a:55:02:
dc:c8:ff:20:ba:58:d8:b5:58:c2:ae:0b:88:b9:6b:
12:3a:cb:96:4d:08:ad:a1:96:c2:5c:99:28:8f:f8:
9e:0e:14:87:5a:b5:ce:f0:f6:1f:4d:8b:64:07:87:
15:ed:54:a5:d6:b3:e7:08:43:e9:d9:86:dd:36:f2:
aa:44:32:d3:85:09:b7:51:94:0e:d7:be:10:f3:94:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:F1:3C:AB:EF:1D:FA:D2:5D:8A:D5:BA:60:8D:8E:FA:DD:E4:24
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:65:69:a2:e6:97:16:72:53:e5:0c:45:db:b6:dd:c5:b5:
87:01:ff:57:f4:e7:4f:af:e9:5c:96:e8:f9:b1:4f:e0:10:b6:
1a:80:2c:9b:43:5f:25:e8:b0:a2:dd:b4:96:7a:38:0e:1a:be:
1d:72:66:4a:3c:9b:c0:36:ba:f4:ee:7b:c4:a4:76:0b:a1:ca:
b3:bd:ce:4e:c3:c3:e9:7d:26:bb:3e:e3:c7:47:f8:80:b8:30:
15:ff:b1:3b:1e:26:28:0c:90:a0:50:d1:2b:88:ae:5b:ef:17:
a4:4c:6e:78:53:51:a1:7d:d4:57:48:2d:ec:c5:be:89:ac:66:
4f:b9:b8:74:49:64:43:fa:67:0f:83:aa:a4:db:19:f0:68:f3:
8e:5d:ef:49:32:8f:82:7c:21:cb:05:89:fc:f9:3e:15:6c:fe:
68:67:96:17:9a:3f:43:0c:6d:11:4f:45:53:d8:7d:58:94:25:
9d:bf:a0:02:bb:e3:4d:eb:74:03:f4:63:80:eb:fa:2a:88:46:
d8:85:c9:02:6f:98:a8:c3:5b:66:20:00:c9:9d:a1:36:07:af:
c0:28:00:39:c4:e0:3f:90:99:d1:91:6f:c8:4c:9e:c6:af:06:
58:ef:05:48:dd:66:fe:c6:1a:d8:25:d6:4f:db:cb:77:07:ba:
33:c9:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:56 2026 by rpki-client